Field notes / archive

Selected writing

Practical notes on security, software, and the systems that make both possible.

Mar 28, 2026 9 min read

AWS IAM Common Vulnerabilities & Mitigations: Lessons from Real Bug-Hunting and Lab Simulations

From real bug-bounty patterns — 5 AWS IAM misconfigurations I hunt for (overly permissive policies, AssumeRole trusts, privilege escalation paths) — reproduced in a lab AWS account with ScoutSuite/Prowler evidence and …

Cloud Security
AWS
IAM

Read article